Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: ZjsJM6mJXDPn1oJuFeIeBsaFJezvpm9D2w20CLsbqFQ=
Subject key identifier: F2:FB:C3:E4:58:63:ED:7F:80:79:B5:06:05:CA:31:B7:8B:6F:E7:29
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 019FA93E0D732CC9897AABDD4231180FEFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: 0168
Signing time: Tue 28 Jul 2026 15:00:43 +0000
Manifest this update: Tue 28 Jul 2026 15:00:43 +0000
Manifest next update: Wed 29 Jul 2026 15:00:43 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: A+wbRWU/XXYmYHHJ0DrnNpzfCSopFOAyVWxgny/uif4=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:0d:73:2c:c9:89:7a:ab:dd:42:31:18:0f:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Jul 28 15:00:43 2026 GMT
Not After : Jul 29 15:00:43 2026 GMT
Subject: CN=f2fbc3e45863ed7f8079b50605ca31b78b6fe729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:85:b6:a0:82:7f:36:f1:65:fd:61:fa:0c:
30:8b:37:68:09:2e:24:8c:6a:10:aa:db:6a:1c:f9:
f3:9d:73:cb:c1:ef:16:1d:f0:96:23:5e:32:4c:2c:
16:c9:b1:20:d6:f4:5d:49:ec:45:79:b6:92:f3:03:
75:0a:fb:a6:c2:44:70:83:45:b9:a3:83:7f:e6:84:
5f:85:08:34:9c:9c:36:45:75:64:25:b6:ba:b1:8e:
2b:e5:cb:ec:b0:0c:e8:f7:42:79:40:74:11:14:b9:
62:d3:2b:3c:b7:0e:db:38:01:b3:f0:a6:79:95:41:
03:c4:00:5a:37:98:1b:b7:77:b2:ca:41:1c:c6:84:
9a:4d:08:19:a1:2b:de:82:ed:c1:a2:19:8d:c0:08:
c6:44:f8:e1:90:a2:f6:fe:b8:30:07:7a:e9:0c:12:
ce:d4:ec:4e:86:b9:39:c4:94:bb:0f:ad:a2:9d:fe:
05:ed:1b:96:79:76:bb:35:04:38:27:c8:e4:82:63:
7d:44:c2:3c:83:ed:30:50:f7:db:62:db:1f:44:5d:
76:98:8f:52:e0:fa:db:ad:39:b1:c0:4d:a6:c0:93:
b1:4a:a7:61:31:f6:2b:3e:2d:21:b6:d1:45:10:4a:
f0:12:b9:4d:d5:04:4e:31:2b:6e:30:c0:56:ab:c3:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:C3:E4:58:63:ED:7F:80:79:B5:06:05:CA:31:B7:8B:6F:E7:29
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d7:58:33:4e:5a:8e:4b:4c:1a:1f:2f:3d:08:47:25:c2:85:
82:b8:1c:63:70:b3:16:46:3b:6f:38:e0:0e:e9:97:41:04:22:
96:a1:65:73:65:ea:3a:30:64:8c:f3:7c:b1:39:79:60:c9:06:
87:19:69:34:10:89:2d:32:90:45:cc:0f:2f:88:9c:1e:c7:85:
a0:f0:c8:8e:db:f7:2c:b9:fa:5a:13:9b:62:b8:51:bc:65:c3:
3b:9c:6e:ac:da:9e:9c:30:ec:7d:60:39:67:f9:90:a1:4b:fe:
ae:30:6c:3c:fe:f4:d6:30:4b:2a:21:af:f5:71:01:94:0b:7d:
5d:63:15:b1:13:40:da:1b:1c:69:c5:50:00:1e:79:79:dd:bd:
4b:40:82:d0:f7:4b:f6:43:36:4e:24:74:af:9c:3d:ce:a2:9b:
e9:3a:9d:68:8c:1e:51:ee:c7:0d:e5:05:0d:ec:1e:14:b9:4b:
35:9e:3c:4e:4d:b1:ca:ce:c3:94:63:0c:df:fd:66:37:a1:4d:
7c:a4:3b:8f:5c:fd:5b:1e:f6:42:9e:76:b8:44:f2:6a:27:20:
b8:98:d1:ef:f7:23:0f:bb:a0:cd:41:c4:9e:7e:28:dd:3a:ff:
44:e6:05:7b:b7:3b:b6:02:f8:bc:18:c3:2b:ca:a1:02:40:00:
25:c7:4e:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPg1zLMmJeqvdQjEYD+/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmE5NzlkZDA4ZGJlMDNjMTc0OGEwMjJmYTY2NTRkMzYx
MTk0MGYwHhcNMjYwNzI4MTUwMDQzWhcNMjYwNzI5MTUwMDQzWjAzMTEwLwYDVQQD
EyhmMmZiYzNlNDU4NjNlZDdmODA3OWI1MDYwNWNhMzFiNzhiNmZlNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zmFtqCCfzbxZf1h+gwwizdoCS4k
jGoQqttqHPnznXPLwe8WHfCWI14yTCwWybEg1vRdSexFebaS8wN1CvumwkRwg0W5
o4N/5oRfhQg0nJw2RXVkJba6sY4r5cvssAzo90J5QHQRFLli0ys8tw7bOAGz8KZ5
lUEDxABaN5gbt3eyykEcxoSaTQgZoSvegu3BohmNwAjGRPjhkKL2/rgwB3rpDBLO
1OxOhrk5xJS7D62inf4F7RuWeXa7NQQ4J8jkgmN9RMI8g+0wUPfbYtsfRF12mI9S
4PrbrTmxwE2mwJOxSqdhMfYrPi0httFFEErwErlN1QROMStuMMBWq8MVDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL7w+RYY+1/gHm1BgXKMbeLb+cpMB8GA1UdIwQY
MBaAFGe6l53Qjb4DwXSKAi+mZU02EZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAt
MDE0NGZkNzdlYmU0LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMzBjMDQtZWVmYS00NTMxLTkwZDAtMDE0NGZkNzdlYmU0
LzEvWjdxWG5kQ052Z1BCZElvQ0w2WmxUVFlSbEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9dYM05a
jktMGh8vPQhHJcKFgrgcY3CzFkY7bzjgDumXQQQilqFlc2XqOjBkjPN8sTl5YMkG
hxlpNBCJLTKQRcwPL4icHseFoPDIjtv3LLn6WhObYrhRvGXDO5xurNqenDDsfWA5
Z/mQoUv+rjBsPP701jBLKiGv9XEBlAt9XWMVsRNA2hscacVQAB55ed29S0CC0PdL
9kM2TiR0r5w9zqKb6TqdaIweUe7HDeUFDeweFLlLNZ48Tk2xys7DlGMM3/1mN6FN
fKQ7j1z9Wx72Qp52uETyaicguJjR7/cjD7ugzUHEnn4o3Tr/ROYFe7c7tgL4vBjD
K8qhAkAAJcdOSA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:08:52 2026 by rpki-client